Privacy policy

1. Who we are

Keel helps you build a master CV, then makes a CV and cover letter from it for each job you apply for. Keel is run by [Business name], a New Zealand company (company number [number]), of [business address].

If you have a question about your personal information, email keelcareers@gmail.com.

2. What we collect

• Your email address, from Google (or Apple, once we offer it) when you sign in. We ask for your email address only, not your name, photo or contacts.
• Your master CV: the CV you upload or type into Keel. It is stored encrypted.
• Your colour choice for your CV, saved with your master CV.
• Referees, only if you add them: their names and contact details, saved encrypted with your master CV and shown on your CV only if you choose. Please add only people who have agreed. When you upload a CV, our AI service reads the whole file, including any referees in it, so it can sort them out. After that, referee details are never sent to the AI service.
• Examples, only if you answer selection criteria questions: your own answers, saved encrypted with your master CV so Keel can use them for your next applications. Like the rest of your master CV, they are sent to the AI service when Keel writes for you. They never appear on your CV. You can remove any of them on your My master CV page, and they are deleted with your master CV.
• Usage counts: how many times each day Keel has read a CV, checked a job ad, suggested wording or written answers for you, so we can apply daily limits.
• Payment records, once payments start: whether you have a job pack or a 30-day pass, and a reference from our payment provider. We never see or store your card number.
• One sign-in cookie, which keeps you signed in. It is needed for Keel to work.

3. What we do not collect or keep

• Passwords. You sign in with Google (or Apple, once we offer it), so Keel never sees a password.
• Job ads, and the CVs, cover letters and selection criteria answers Keel writes for each job. Keel uses them to write your documents and does not save them, so download each one and keep it on your own device or drive. (Your own answers to selection criteria questions are kept as examples, as described above.)
• Your photo. If you add a photo to your CV, it stays on your own device. It is never sent to Keel or to our AI provider.
• Advertising or tracking cookies, or analytics tools.
• We do not sell or rent your personal information to anyone.

4. Why we collect it

Giving us your CV is up to you, but Keel cannot build your documents without it. We do not use your CV to market to you, and we do not use it to train AI models.

• To sign you in and keep your account secure.
• To build, store and update your master CV.
• To make a CV and cover letter for each job you choose.
• To apply daily limits and take payments.
• To answer you when you contact us.

5. How Keel uses AI

To read your CV and write your documents, Keel sends the text of your CV, any job ad or selection criteria you paste in, and your answers to Keel's questions to our AI provider, a company based in the United States. Your photo is never sent. Under our provider's commercial terms, the information we send is not used to train its models.

Keel checks what the AI writes before you see it. Any number that is not in your own CV is removed and shown to you, so nothing invented reaches your documents.

6. Who else handles your information

We use these service providers. Each one gets only what it needs to do its job.

• Vercel Inc. runs the Keel website. Our servers run in Sydney, Australia.
• Neon stores the database, including your encrypted master CV, in Sydney, Australia.
• Our AI provider, a company based in the United States, reads your CV and writes your documents.
• Google (and Apple, once we offer it) provide sign-in.
• Stripe takes payments, once payments start. Card details stay with Stripe.

7. Keeping and sending information overseas

Your information is stored in Australia and processed in the United States by the providers above. We choose providers that protect personal information to a standard comparable to New Zealand and Australian law.

8. How we keep it safe

• Your master CV is encrypted in our database, and the encryption is tied to your account, so one account can never open another's CV.
• Every page and action that touches your CV checks that you are signed in as its owner.
• All connections to Keel are encrypted, and the website blocks scripts from other sites.
• Only the people who run Keel can reach its systems, and their accounts use two-step sign-in.

9. How long we keep it

• Your email address and master CV stay until you delete them, or until your account has had no activity for 12 months. Signing in or saving your CV counts as activity. After 12 months without activity, Keel deletes the account automatically.
• Usage counts are deleted with your account.
• Job ads, and the CVs and letters Keel makes for each job, are never kept.
• Our database provider keeps short-term backups for recovery. Deleted information leaves those backups when they expire.

10. Your rights

• See your information: your master CV is always on your My master CV page. To ask for anything else we hold about you, email keelcareers@gmail.com. We will reply within 20 working days.
• Correct it: edit your master CV at any time, or ask us to correct anything else.
• Delete it: use Delete my data on your Account page. It removes your email address and master CV straight away and signs you out.
• Complain: tell us first at keelcareers@gmail.com. If you are not happy with our answer, you can contact the New Zealand Privacy Commissioner (privacy.org.nz) or, in Australia, the Office of the Australian Information Commissioner (oaic.gov.au).

11. If something goes wrong

If a privacy breach happens that is likely to cause serious harm, we will tell you and the Privacy Commissioner as soon as we can, as the New Zealand Privacy Act requires, and the Australian Information Commissioner where Australian law requires it.

12. Age

Keel is for people aged 16 and over.

13. Changes to this policy

If we change this policy, we will post the new version here with the date it takes effect. If a change affects how we use information you have already given us, we will tell you first.